You can't always fix it

This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).

A developer describes discovering serious data leaks in prescription medication courier tracking pages — exposing customer addresses, signatures, porch photos, and even a Stripe private key. Despite multiple attempts at responsible disclosure through direct contact, pharmacy staff, and prescribers, the vulnerabilities remain

4m read timeFrom ntietz.com
Post cover image
Table of contents
Tracking my packageResposibly disclosing the vulnerabilityIt's not my responsibility to fix this (and I can't)

Sort: